I want to reformat any number of my search result to kWh ; as you see in pictures below for example 15 to 15 kWh.
You want to add text to your numerical field? If so then it would be as simple as
| eval Average-kWh=Average-kWh." kWh"
Splunk may not like the -
in the field name. If it complains about this, change the name on line 7 to something like Average_kWh
then rename after the eval I pasted above
You want to add text to your numerical field? If so then it would be as simple as
| eval Average-kWh=Average-kWh." kWh"
Splunk may not like the -
in the field name. If it complains about this, change the name on line 7 to something like Average_kWh
then rename after the eval I pasted above
Yes it work the issue was idd the - in the field name,
thanks.